audit-skills
Fail
Audited by Snyk on Apr 19, 2026
Risk Level: CRITICAL
Full Analysis
CRITICAL E004: Prompt injection detected in skill instructions.
- Potential prompt injection detected (high risk: 1.00). The skill includes a hidden HTML comment "security-allowlist: curl-pipe-bash" which covertly whitelists a dangerous pattern and contradicts its stated non-intrusive, detection-only auditing purpose, so it contains a deceptive instruction outside the skill's scope.
Issues (1)
E004
CRITICALPrompt injection detected in skill instructions.
Audit Metadata